diff options
| author | 2023-07-28 15:07:55 -0700 | |
|---|---|---|
| committer | 2023-08-14 13:50:31 -0700 | |
| commit | c7ab564d8825f96103acec56684e5b0af1355073 (patch) | |
| tree | 4d19c2858dce1d70c2a1e023a70b5f6a43501249 /libs/gui/ConsumerBase.cpp | |
| parent | bd8b30c492664d2dcb9d7acdf7b5ea158ab14829 (diff) | |
installd: allow enabling fs-verity to a given file
The caller is allowed to request installd to enable fs-verity to a
given file. Normally this is initiated by the app through an API, via
system server.
We must not allow an app to enable fs-verity to a file they don't own.
In addition, the design also treat the less-privilged system server as
untrusted and limit what it can do through the API.
See code comments for more details.
Bug: 285185747
Test: Call the API from a local client
Test: atest installd_service_test
Change-Id: I0782a9b23f3817898df0703cfdd9d8670f8fcdfb
Diffstat (limited to 'libs/gui/ConsumerBase.cpp')
0 files changed, 0 insertions, 0 deletions